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Abstract 

The  classic  Gibbard-Satterthwaite  Theorem  establishes  that  only  dictatorial  voting 
rules  are  strategy-proof;  under  any  other  voting  rule,  players  have  an  incentive  to  lie 
about  their  true  preferences.  We  consider  a  new  approach  for  circumventing  this  result: 
we  consider  randomized  voting  rules  that  only  approximate  a  deterministic  voting  rule 
and  only  are  approximately  strategy-proof.  We  show  that  any  deterministic  voting 
rule  can  be  approximated  by  an  approximately  strategy-proof  randomized  voting  rule, 
and  we  provide  asymptotically  tight  lower  bounds  on  the  parameters  required  by  such 
voting  rules. 


1  Introduction 

The  classic  Gibbard-Satterthwaite  Theorem  [7,  15]  considers  the  question  of  when  voters 
will  honestly  report  their  preferences.  It  shows  that  if  the  voting  rule  has  at  least  three 
outcomes,  then  only  dictatorial  functions  (i.e.,  one  player  determines  the  output)  can  be 
honestly  computed  by  rational  agents. 

The  earliest  approach  to  circumventing  this  limitation,  first  suggested  by  Gibbard  [8] 
and  later  advocated  by  Conitzer  and  Sandholm  [3],  consists  of  using  randomized  approx¬ 
imations  as  a  means  to  bypass  the  limitations  of  deterministic  rules.  Unfortunately,  the 
potential  of  this  approach  is  limited  by  two  negative  results.  Gibbard  showed  that  the  only 
strategy-proof  randomized  voting  rules  are  trivial  in  that  they  consist  of  simple  probability 
distributions  over  rules  that  depend  on  only  one  voter  ( unilateral  rules )  and  rules  that  have 
at  most  two  possible  outputs  ( duple  rules).  In  recent  work,  Procaccia  [14]  quantified  the 
quality  of  approximation  that  can  be  achieved  by  such  trivial  functions  (for  certain  types 
of  voting  rules):  in  particular,  he  constructed  a  simple  approximation  of  PLURALITY  (the 
voting  rule  that  returns  the  outcome  that  receives  the  most  first-choice  votes).  However,  his 
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approximation  only  guarantees  that  the  expected  number  of  votes  received  by  the  returned 
output  is  2/3  the  number  received  by  the  true  winner,  and  he  proves  that  his  mechanism  is 
asymptotically  optimal. 

An  alternative  approach  that  consists  of  restricting  the  class  of  preference  functions. 
Notably,  Moulin  [13]  considers  voting  rules  defined  over  an  output  set  with  a  natural  total 
ordering  with  single-peaked  preferences,  that  is  utilities  that  have  an  optimal  outcome  (the 
peak )  and  decrease  monotonically  with  distance  from  the  peak.  He  constructs  rules  that  are 
strategy-proof  with  respect  to  this  (very  restricted)  class  of  utility  functions. 

A  final  intriguing  approach  to  circumventing  this  limitation,  first  suggested  by  Bartholdi 
et  al.  [2],  is  to  construct  voting  rules  that  are  computationally  difficult  to  manipulate. 
However,  there  are  strong  impossibility  results  that  limit  the  potential  of  this  approach.  In 
their  original  work,  Bartholdi  et  al.  showed  that  many  standard  voting  rules  can  be  efficiently 
manipulated.  Moreover,  recent  work  demonstrates  that  for  any  voting  rule,  “bad  inputs” 
(preference  profiles  that  admit  a  successful  non- honest  strategy)  are  not  rare  [3,  5,  10];  these 
papers  develop  lower  bounds  for  the  number  of  preference  profiles  which  admit  some  kind  of 
manipulation  and  show  that  when  the  number  of  outputs  is  small  it  is  easy  to  find  successful 
manipulations. 

In  this  work,  we  consider  a  new  approach  to  circumventing  these  previous  negative  results: 
approximately  strategy-proof  voting  rules.  This  approach  is  motivated  by  the  observation 
that  previous  work  assumes  that  people  will  deviate  from  the  honest  strategy  even  if  the 
improvement  in  their  utility  is  extremely  small.  In  practice,  people  often  don’t  deviate  if  the 
gain  is  very  small;  a  small  gain  in  utility  may  be  offset  by  a  psychological  cost  associated  with 
lying  or  by  the  computational  cost  of  computing  an  effective  deviation  [9] .  This  phenomenon 
is  compounded  by  the  fact  that  when  risk-averse  individual  voters  are  uncertain  about  the 
preferences  of  the  other  voters,  they  may  not  pursue  a  deviation  that  is  only  expected  to 
yield  a  small  benefit.  In  other  contexts,  these  observations  have  led  to  the  introduction  of 
relaxed  solution  concepts  (e.g.,  e-Nash  equilibria  and  e-dominant  strategies).  In  the  context 
of  voting,  we  thus  consider  e-strategy-proof  voting  rules;  that  is  voting  rules  for  which  no 
deviating  strategy  can  improve  a  player’s  expected  utility  by  more  than  e. 

Unfortunately,  a  corollary  of  the  Gibbard-Satterthwaite  theorem  shows  that  the  only 
deterministic  voting  rules  that  are  e-strategy-proof  are  dictatorial  rules.  We  thus  consider 
approximate  strategy-proofness  in  the  context  of  randomized  voting  rules.  As  it  turns  out, 
the  parameter  e  quite  sharply  determines  whether  or  not  there  exist  non-trivial  e-strategy- 
proof  voting  rules. 

For  the  remainder  of  this  section,  let  n  be  the  number  of  voters  and  let  the  number  of 
outcomes  be  a  fixed  constant  k. 

e  =  ca(l/n):  In  this  regime,  we  show  that  there  exist  natural,  non-trivial,  e-strategy-proof 
voting  rules.  Moreover,  we  show  that  every  deterministic  voting  rule  /  can  be  approximated 
by  a  non-trivial,  e-strategy-proof  voting  rule  g.  Towards  formalizing  this,  we  require  a  notion 
of  what  it  means  for  a  randomized  mechanism  to  approximate  a  deterministic  voting  rule. 
Intuitively,  we  want  to  capture  the  idea  that  with  high  probability,  the  output  of  g  is  “close” 
to  that  of  /.  To  define  closeness,  we  consider  a  specialized  distance  metric  inspired  by  the  idea 
of  vote  corruption,  that  is  the  observation  that  in  real-life  elections,  votes  get  miscounted, 
recounted,  lost,  etc.  We  say  that  the  output  y  e  g{x)  is  5-close  to  the  right  answer  if  there 
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exists  some  vector  x'  that  differs  from  x  in  only  5  positions,  such  that  f(x')  =  y,  in  other 
words,  when  the  output  is  5-correct,  it  means  that  we  could  have  reached  this  output  by 
flipping  only  5  votes.  Our  main  theorem  can  now  be  informally  stated  as  follows: 

Theorem  1.1  (Upper  Bound  -  Informal  Statement).  Let  £  =  u{l/n),  (3  >  0,  and  let  f  be  a 
deterministic  voting  rule  over  n  players.  For  sufficiently  large  n,  there  exists  an  e-strategy- 
proof  randomized  voting  rule  g  that  is  a  (3n- approximation  of  f . 

Intuitively  speaking,  our  mechanism  guarantees  that  the  outcome  returned  by  g  will  be  the 
correct  one  modulo  a  change  in  a  few  votes.  When  dealing  with  large  election  (e.g.,  national 
elections)  this  seems  like  a  reasonable  guarantee. 

One  may  ask  whether  an  alternative  notion  of  approximation  can  be  achieved:  For  in¬ 
stance,  could  we  hope  to  get  a  mechanism  that  yields  the  correct  output  with  high  probabil¬ 
ity?  In  Section  6  we  consider  this  alternative  definition,  and  we  show  that  this  is  impossible 
unless  the  underlying  voting  rule  /  is  dictatorial.  We  believe  this  negative  result  highlights 
why  our  definition  of  approximation  is  both  reasonable  and  minimal  for  circumventing  the 
negative  results  of  Gibbard  and  Satterthwaite. 

£  =  o(l/n):  In  this  setting,  we  show  that  the  Gibbard’s  result  characterizing  strategy-proof 
randomized  voting  rules  [8]  still  applies: 

Theorem  1.2  (Lower  Bound  -  Informal  Statement).  If  g  is  a  o(l / n) -strategy-proof  random¬ 
ized  voting  rule,  then  g  is  trivial  ( i.e .,  a  distribution  over  unilateral  and  duple  rules). 

We  additionally  show  that  natural  voting  rules  (e.g.,  Plurality)  cannot  be  well  ap¬ 
proximated  by  such  mechanisms.  This  result  can  be  informally  stated  as  follows: 

Theorem  1.3  (Plurality  -  Informal  Statement).  Let  g  be  a  trivial  voting  rule  over  n 
players.  There  exists  f3  such  that  for  sufficiently  large  n,  g  cannot  be  a  (3n- approximation  of 
Plurality. 

In  fact,  in  Section  6  we  extend  this  result  to  show  that  there  is  no  trivial  voting  rule  that 
approximates  PLURALITY  even  with  high  probability. 

The  two  theorems  combined  bound  the  approximation  parameters  that  can  be  achieved 
for  natural  voting  rules  like  PLURALITY.  Note  that  Theorem  1.3  also  implies  that  the 
approximations  constructed  in  Theorem  1.1  are  non-trivial. 

Additional  Properties  Finally,  we  observe  that  there  are  many  properties  (other  than 
strategy-proofness)  that  are  desirable  in  a  voting  rule.  We  show  that  in  addition  to  being 
e-strategy-proof,  the  mechanisms  we  construct  are  collusion-resistant — a  group  of  t  players 
cannot  increase  their  collective  utility  by  more  than  a  small  amount.  Moreover,  when  we 
consider  a  neutral  voting  rule — one  whose  outcome  is  independent  of  voter  identities — and 
a  constant  number  of  outcomes,  our  mechanism  is  computationally  efficient. 
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2  Definitions  and  Preliminaries 


A  voting  rule  /  is  a  mapping  from  player  “votes”  to  an  outcome  in  the  set  [k]  —  {1, . . . ,  k}. 
Player  votes  are  total  preference  orderings  over  the  set  of  outcomes  [fc];  these  preference 
orderings  are  represented  as  a  permutation  a*  G  (here  denotes  the  set  of  permutations 
over  [&]).  We  use  the  notation  aflj)  >  crflj')  when  the  preference  type  a*  G  ranks  outcome 
j  higher  than  outcome  j'.  For  convenience,  a  preference  profile  o  =  (ay, . . . ,  an)  may  also  be 
denoted  by  (cq,  <?_*)  for  any  i  G  [n] . 

Players  are  motivated  by  determinism — that  is,  they  prefer  that  outcomes  ranked  higher 
in  their  preference  ordering  cq  are  chosen.  More  formally,  each  player  i  has  a  preference 
ordering  a*  and  a  utility  function  tq  G  Uai)  the  class  of  utility  functions  tq  that  satisfy  the 
following  two  properties:  First,  for  all  tq(<7,  j)  >  if  crflj)  >  cq(j').  Second,  for 

all  input-output  pairs  (<?,  j),  tq(<?,  j)  G  [0,1]. 

Observe  that  although  it  is  traditional  to  talk  exclusively  about  the  preference  relations 
cq,  the  underlying  utility  function  is  necessary  in  order  to  quantify  approximate  strategy- 
proofness.  The  restriction  to  utilities  in  the  range  [0, 1]  is  not  strictly  necessary  (our  tech¬ 
niques  only  rely  on  the  fact  that  the  utilities  are  bounded),  however  we  believe  that  utilities 
in  this  range  lend  themselves  to  a  more  intuitive  interpretation. 

2.1  Approximately  Strategy-proof  Voting 

We  say  that  a  voting  rule  is  (approximately)  strategy-proof  if  for  all  players,  honestly  re¬ 
porting  their  preferences  (approximately)  dominates  any  other  reporting  strategy. 

Definition  2.1  (e-strategy-proof).  A  voting  rule  g  is  e-strategy-proof  if  for  all  players  i,  all 
preference  profiles  cf,  all  alternative  preferences  cr',  and  all  utility  functions  tq  G  Uai, 

E[ui(a,g(a))\  +  e>  E[ufla,  g{a[,  u_,;)] 

The  notion  of  strategy-proof  voting  rules  can  also  be  extended  to  handle  collusions  be¬ 
tween  groups  of  t  players. 

Definition  2.2.  A  voting  rule  g  :  (£fc)n  — >  [k\  is  (t,  e)  -strategy-proof  if  for  all  subsets  S  C  [n] 
such  that  \S\  <  f,  all  preference  profiles  a  and  a'  such  that  a*  =  a[  for  all  i  ^  S,  and  all 
utility  profiles  u  G  Ug, 

^E[ui(a,g(a))]  +e>  ^  E  [uffa,  g{a>)] . 

ieS  ieS 

Intuitively,  we  interpret  e-strategy-proofness  to  mean  that  if  there  is  a  small  cost  associ¬ 
ated  with  deviating  (e.g.,  a  psychological  cost  to  lying  or  a  computational  cost  to  finding  a 
successful  deviation)  then  the  voters  will  honestly  report  their  preferences. 

2.2  Voter  Max-Influence 

We  introduce  a  new  concept  inspired  by  the  notion  of  variable  influence  [11]  which  we  call 
max-influence ;  max- influence  describes  the  maximum  amount  by  which  a  single  player  can 
impact  the  probability  that  a  particular  output  is  returned  by  a  voting  rule. 
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Definition  2.3  (^-max-influence).  A  player  %  G  [n]  has  £ -max-influence  over  a  voting  rule 
g  :  — s ►  [k]  if  there  exists  a  preference  profile  B  and  an  alterative  preference  cr'  such  that 

the  statistical  distance  between  g(B)  and  <?(cr',  B-f)  is  at  least  £,  that  is  if 

\  I  Pr^(<?)  =  J]  ~  P v[9(v'i,  a-i)  =  j]\  >  t 

je[fc] 

We  observe  that  if  no  player  %  has  ^-max-influence  over  a  voting  rule  g  then  the  rule  is 
approximately  strategy-proof. 

Lemma  2.4.  Let  g  :  (Efc)n  — ■>  [k\  be  a  voting  rule  such  that  no  player  i  G  [n]  has  £- max- 
influence  over  g.  Then  g  is  2^-strategy-proof. 

Proof.  Let  B,  B’  be  preference  profiles  that  differ  only  on  input  i  (that  is  cr,  =  cr'  for  all 
j  i),  and  let  Ui  be  voter  i’s  utility  function.  Let  S$  =  {j  :  Pr \g{B)  =  j }  >  Pr  [g(cr')  =  j]} 
and  let  Sff>  be  its  complement  (the  set  of  outputs  that  are  more  likely  to  be  generated  by 
*)■ 

E[ui(B , g(B'))\  -E[ui(B,g(B))\  =  Y Pr[g{B ')  =j]ui(B,j)  -  ^Pr[g{B)  =j]Ui(B,j) 

j  j 

=  Y  (Prb(<j')  =  j]  -  Pr[<?(cr)  =  j])ui{B,j) 

j&Sg, 

+  Y^9^  =  A  ~  Pr[^(<?)  =  j])ui&j) 

jess 

<  Y  (Pr^(a?/)  =  -  PiM^) = j])  • 1 + 0 

j&Sg, 

<2^ 

Therefore  the  constructed  approximation  g  is  2£-strategy-proof.  □ 

We  also  present  an  analogous  result  for  coalitions. 

Lemma  2.5.  Let  g  :  (Efc)n  — > ►  [k\  be  a  voting  rule  such  that  no  player  i  G  [n]  has  £- max- 
influence  over  g.  Then  g  is  ( t,2t2t;)-strategy-proof . 

Proof.  For  any  subset  of  t  players  S  =  (s(l), . . . ,  s(t)}  C  [n] ,  let  cr,  B’  be  two  preference 
profiles  that  differ  only  on  components  i  G  S.  that  is  for  all  i  f  S,  at  =  cr'.  Define  a 
sequence  of  hybrid  profiles  B°, . . .  ,Bf  such  that  in  profile  Be,  players  j  G  (s(l), . . . ,  s(f')} 
have  preference  crj  =  cr',  players  j  G  {s(£  +  1), . . . ,  s(t)}  have  preference  crj  =  a3  and  all 
other  players  j  f  S  have  preference  crj  =  a3  =  cr'.  Observe  that  B  =  B°  and  B'  —  Bt. 

Observe  that  for  all  i  G  S  and  all  i  G  [t],  E [ui(B,  g(Be))\  —  E[uj(<7,  <?(<7^-1))]  <  2 £  (the 
proof  is  identical  to  the  proof  of  2£-strategy-proofness  in  Lemma  2.4).  It  follows  the  difference 
in  the  group’s  collective  utility  between  any  two  consecutive  hybrid  profiles  is  bounded  by 
E;esEM<T  9 (<?))]  -  E*es  E  [ui(B,  g(B')\  <  2 and  therefore  that  the  total  difference  in 
collective  utility  between  the  honest  strategy  and  the  collective  deviating  strategy  is  at  most 

Y  E  ^(<?))] _  E  -  2t2£  D 

ieS  ieS 
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Observe  that  Gibbard  and  Satterthwaite’s  classic  result  shows  that  every  non-dictorial 
voting  rule  with  at  least  three  outputs  has  a  player  with  1-max-influence.  By  contrast,  we 
will  show  that  every  voting  rule  can  be  approximated  by  a  randomized  voting  rule  over  which 
no  player  has  much  max-influence. 

2.3  Approximations 

In  order  to  formally  define  the  notion  of  a  randomized  approximation,  it  is  necessary  to 
define  a  closeness  metric  d  for  voting  rules.  The  appropriate  choice  of  metric  in  such  a 
context  is  not  immediately  clear.  Since  outcomes  are  assigned  an  arbitrary  number  j  G  [k] 
and  votes  are  permutations  over  the  outcomes  (interpreted  as  a  total  preference  ordering), 
standard  notions  of  “closeness”  are  meaningless.  While  some  particular  voting  rules  have 
natural  quality  scores  that  can  be  used  to  define  an  approximation  [14],  such  techniques  are 
not  fully  generalizable. 

We  instead  introduce  a  pseudometric  dv  inspired  by  vote  corruption,  that  is  the  observa¬ 
tion  that  in  real-life  elections,  votes  get  miscounted,  recounted,  lost,  etc.  This  pseudometric 
dv  associates  a  number  l  with  each  pair  [p,  j)  G  (Efc)n  x  [k]  defined  by 

^(<Tj)=  min  .  A(<t,  o') 

a'  s.t.  f {<?')=] 

where  A(<r,  o')  is  the  number  of  components  which  differ  between  o  and  o' .  We  define  an 
induced  pseudometric  dv((o,  j),  (o',  j'))  =  \ £(o,j)  —  £(o',j')\.  This  says  that  an  output  is 
close  to  the  correct  answer  if  there  exists  an  input  close  to  the  true  input  which  generates 
that  output. 

Using  this  metric,  we  consider  an  approximation  g  to  be  a  function  whose  value  is  close 
to  that  of  /. 

Definition  2.6  (^-approximation).  A  (randomized)  voting  rule  g  is  a  8- approximation  of  a 
voting  rule  /  if  for  all  inputs  o  and  all  possible  random  coins, 

dv((o,g(d)),  (o,f(o)))  <  5. 

Remark  2.7.  In  Section  6,  we  relax  our  definition  of  an  approximation  to  consider  functions 
that  are  close  to  the  correct  outcome  with  high  probability  and  show  that  our  lower  bounds 
extend  to  the  relaxed  definition. 

2.4  Trivial  Voting  Rules 

There  are  two  classes  of  simple  voting  rules,  collectively  referred  to  as  trivial,  that  will  be 
used  to  characterize  the  set  of  strategy-proof  voting  rules  under  certain  conditions.  The  first 
is  the  class  of  rules  that  depend  on  only  one  player’s  inputs,  and  the  second  is  the  class  that 
returns  at  most  two  outputs. 

Definition  2.8  (Gibbard  [8]).  A  deterministic  voting  rule  /  :  (S^)"-  — >  [k]  is  unilateral  if 
there  exists  a  player  i  such  that  for  all  preferences  profiles  o,  o'  G  (E*,)n  satisfying  a*  =  o', 
f(o)  =  f(o').  A  voting  rule  that  is  unilateral  and  onto  is  also  called  dictatorial. 
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Definition  2.9  (Gibbard  [8]).  A  deterministic  voting  rule  /  :  (£fc)n  — * ►  [k]  is  a  duple  if  the 
range  is  at  most  2,  that  is  if  \{j  G  [k]  :  3a  G  (Efc)n  such  that  f(a)  —  j }  <2. 

A  voting  rule  is  called  trivial  if  it  is  a  probability  distribution  over  unilateral  and  duple  rules, 
otherwise  it  is  called  non-trivial. 


3  Previous  Work 

Randomized  voting  has  been  recently  explored  by  Procaccia  [14]  who  shows  how  to  define 
O-strategy-proof  approximations  of  certain  voting  rules  that  are  derived  from  natural  quality 
scores.  Our  work  differs  from  his  approach  both  in  our  use  of  e-strategy-proof  rules  and 
in  the  way  we  define  and  construct  approximations.  In  particular,  Procaccia’s  work  relies 
on  a  natural  quality  score  to  define  an  approximation,  a  technique  that  prevents  discus¬ 
sion  of  certain  types  of  voting  rules  including  multi-layered  rules  like  run-off  elections  or 
the  electoral  college-based  system  employed  in  U.S.  presidential  elections.  Furthermore,  as 
Procaccia  demonstrates,  the  quality-score  based  approach  is  inherently  limited  in  the  qual¬ 
ity  of  approximations  that  can  be  achieved;  for  example,  it  is  impossible  to  construct  a 
strategy-proof  approximation  of  Plurality  that  will  (in  expectation)  return  an  outcome 
with  quality  score  greater  Vt{l/\/k)  times  the  optimal.  Although  he  does  construct  an  ap¬ 
proximation  for  Plurality,  if  his  approximation  were  employed  during  an  election  between 
four  candidates,  the  expected  number  of  votes  received  by  the  candidate  it  returns  would  be 
2/3  the  number  of  votes  received  by  the  true  winner. 

There  are  two  important  negative  results  in  the  context  of  voting.  The  first,  proven 
independently  by  Gibbard  [7]  and  Satterthwaite  [15],  demonstrates  that  only  a  trivial  col¬ 
lection  of  voting  rules  are  strategy-proof.  Restated  with  our  definitions,  they  show  that  only 
dictatorial  functions  are  O-strategy-proof. 

Theorem  3.1  (Gibbard-Satterthwaite).  Let  f  :  (Efc)n  — >  [k]  be  a  deterministic,  onto  voting 
rule  with  k  >  3.  Then  f  is  O-strategy-proof  if  and  only  if  it  is  dictatorial. 

This  result  has  been  quantitatively  extended  to  give  lower  bounds  on  the  number  of  input 
profiles  which  admit  manipulations  [5,  10].  Their  work  shows  that  not  only  are  manipulations 
relatively  common,  but  they  can  also  be  found  efficiently. 

The  Gibbard-Satterthwaite  theorem  has  also  been  extended  to  characterize  the  class  of 
strategy-proof  randomized  voting  rules  [8] .  In  terms  of  our  definitions,  this  extension  shows 
that  only  trivial  voting  rules  are  O-strategy-proof. 

Theorem  3.2  (Gibbard).  Let  g  :  (Sfc)n  — ►  [k\  be  a  randomized  voting  rule.  Then  g  is 
O-strategy-proof  if  and  only  if  it  is  trivial. 

4  Approximate  Voting 

Leveraging  our  new  notion  of  approximate  strategy-proofness,  we  now  show  that  every  vot¬ 
ing  rule  can  be  approximated  by  a  randomized  voting  rule.  Intuitively,  we  construct  an 
approximation  by  adding  noise  to  the  original  deterministic  voting  rule.  The  probability 
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that  these  approximations  return  a  particular  outcome  decreases  linearly  with  the  distance 
between  the  outcome  under  consideration  and  the  correct  outcome;  the  slope  of  this  linear 
function  bounds  the  influence  that  a  voter  can  have  on  the  resulting  approximation.  If  the 
slope  is  sufficiently  steep,  then  we  can  guarantee  that  all  “bad”  outputs  (ones  that  are  S- far 
from  the  correct  output)  are  chosen  with  probability  0. 

Our  techniques  can  be  seen  as  a  linear  analog  of  the  exponential  mechanism  [12]  that  has 
been  used  to  establish  differential  privacy  [4], 

Theorem  4.1.  For  any  deterministic  voting  rule  f  :  (Efc)n  — >  [k],  any  e  >  0  and  any 
S  >  k[k  +  1  +  e)/e  —  1,  f  has  a  e-strategy-proof  5 -approximation  g. 

Proof.  We  construct  an  approximation  g  of  the  voting  rule  /  as  follows:  we  assign  each 
input-output  pair  (a,  j)  a  quality  score  q(a,j )  =  — d„((<?,  /(<?)),  (<?,  j)).  Observe  that  g(<?,  j) 
decreases  linearly  with  the  (minimal)  number  of  votes  that  must  be  corrupted  before  / 
returns  j  instead  of  /(<?).  Let  f  =  e/k[k  +  1  +  e) — this  value  is  chosen  to  guarantee  e- 
strategy-proofness.  The  mechanism  g  returns  the  value  j  with  probability  proportional  to 
maxjl  +  £q(<J,j)i  0}.  Note  that  g  never  returns  an  outcome  more  than  l/£-far  from  /(<?). 

First,  we  bound  the  max-influence  a  voter  can  have  over  g.  For  any  a'  that  differs  from 
a  in  only  one  position  and  any  outcome  j  G  [k\,  the  difference  |  Pr [g(cr')  =  j]  —  Pr[g(<j)  =  j] 
is  equal  to 

maxjl  +  €q{a',  j),  0} _ maxjl  +  £g(a,  j),  0} 

+  £<?(oV)>°}  E^w111^1  +  £g(oS0>°} 

For  the  purpose  of  clarity,  let  A  =  max{l  +  j ) ,  0}  and  let  B  =  maxjl  + 

fq(a,  i),  0}.  Using  this  notation  we  observe  that  the  difference  can  be  bounded  above  by 


A+a 

A 

AB  +  £,B-  AB  +  k£A 

£  -  k^A/B 

B-kf 

"  B 

B 2  -  kfB 

B-ki 

Where  the  first  expression  follows  from  the  definition  of  g,  the  second  from  cross  multipli¬ 
cation,  and  the  third  from  canceling  terms. 

Since  A  =  maxjl  +  £<?(<?,  j),  0}  <  1  (recall  that  quality  scores  are  negative)  and  B  = 
Ete[fo]  maxjl  +  £g(<J,  j),  0}  >  1  (since  the  correct  output,  which  is  included  in  the  sum, 
contributes  1  and  there  are  no  negative  components),  we  can  maximize  this  bound  by  setting 
A  —  B  —  1  giving 

I  ?%(<?')  =  j }  -  Pr [g(a)  =  j}\  <  =  e/k 

which  implies  that  no  player  has  max-influence  greater  than  e/2.  Therefore  by  Lemma  2.4 
the  constructed  approximation  g  is  e-strategy-proof. 

Second,  we  claim  that  g  is  a  good  approximation  for  /  according  to  the  distance  metric 
dv.  Observe  that  the  approximation  g  returns  a  outcome  with  distance  greater  than  l/£ 
from  the  correct  answer  with  probability  0.  Since  we  fixed  6  >  1/f,  all  “bad”  outputs  are 
sufficiently  far  from  the  correct  answer  that  they  are  returned  with  probability  zero,  therefore 
g  always  returns  an  answer  that  is  5-close  to  the  correct  outcome.  □ 

Corollary  4.2.  Let  e  =  u>(l/n),  (3  >  0,  and  let  f  :  (£fc)n  — > >  [k]  be  a  deterministic  voting 
rule.  For  sufficiently  large  n,  there  exists  an  e-strategy-proof  randomized  voting  rule  g  that 
is  a  (3n- approximation  of  f . 


Proof.  Fix  (3  >  0  and  let  5  =  fin.  Let  g  be  defined  as  in  the  proof  of  Theorem  4.1  and 
recall  that  (as  shown  in  the  previous  proof)  g  is  an  e-strategy-proof  /^-approximation  of  / 
if  / 3n  >  k(k  +  1  +  e)/e  —  1.  Since  e  =  u(l /n),  the  result  follows  immediately.  □ 

Example  4.3.  For  concreteness,  consider  an  election  with  100  million  voters  and  three 
outputs  (about  the  scale  of  a  United  States  presidential  election).  Fixing  e  =  .001,  we  can 
construct  an  approximation  g  that  is  guaranteed  to  always  return  an  answer  within  12,500 
votes  of  the  correct  answer,  in  practice,  well  within  the  vote  corruption  in  such  an  election. 
Looked  at  in  another  way,  this  says  that  in  any  such  election  in  which  one  outcome  wins  by 
at  least  12,500  votes,  this  mechanism  will  always  return  the  correct  answer. 

Observe  that  if  £  <  1/n  then  all  outputs  are  chosen  with  positive  probability.  For  such 
small  values  of  s,  the  approximation  g  is  well-defined,  but  it  is  a  trivial  n- approximat ion  of 
/.  In  Section  5  we  show  that  this  uj{l/n)  restriction  is  an  inherent  bound  on  the  achievable 
approximation  parameters  and  not  an  artifact  of  the  construction  employed  in  Theorem 
4.1.  In  contrast,  when  e  =  ca(l/n),  the  approximations  both  offer  good  guarantees  and  are 
non-trivial. 

Corollary  4.4.  Let  e  =  u>(l/n)  and  k  =  0(1).  For  sufficiently  large  numbers  of  voters  n, 
there  exist  non-trivial  e-strategy-proof  randomized  voting  rules. 

Proof.  Let  /  be  PLURALITY,  the  voting  rule  that  returns  the  outcome  j  that  receives  the 
most  first-choice  votes  (using  some  deterministic  tie-breaking  rule).  By  Corollary  6.4  we 
know  that  there  exist  arbitrarily  good  approximations  of  /  for  £  =  uj{l/n).  By  Theorem  5.5 
this  implies  that  for  such  e,  the  mechanism  from  Theorem  4.1  is  non-trivial.  □ 

In  addition  to  being  non-trivial  and  approximately  strategy-proof,  the  randomized  voting 
rule  g  constructed  in  the  proof  of  Theorem  4.1  has  several  other  nice  properties.  First,  the 
voting  rule  g  is  collusion- resistant:  its  guarantees  degrade  gracefully  if  the  mechanism  is 
extended  to  protect  against  collusion  by  t  players. 

Corollary  4.5.  For  any  voting  rule  f  :  (S^)n  — >  [k],  any  t  <  n,  any  e  >  0,  and  any 
S  >  {k[ki)t2  +  ke)/e  —  1 ,  f  has  a  (t,  e) -strategy-proof  5 -approximation. 

Proof.  The  proof  is  equivalent  to  that  of  Theorem  4.1  except  that  we  use  a  different  parameter 
£  =  e/k(k  +  1  )t2  +  he.  The  proof  that  the  randomized  voting  rule  g — constructed  as  in 
the  proof  of  Theorem  4.1  (except  with  the  new  value  of  £) — is  (f,  e)-strategy-proof  follows 
immediately  from  Lemma  2.5.  The  proof  that  g  is  a  ^-approximation  of  /  is  identical  to  the 
proof  in  Theorem  4.1.  □ 

Second,  we  observe  that  for  neutral  voting  rules — those  whose  outcome  is  independent 
of  voter  identities — our  approximations  are  computationally  efficient. 

Corollary  4.6.  If  f  :  (Efc)n  — >  [k\  is  a  neutral,  efficiently  computable  voting  rule  with  a 
constant  number  of  outputs  k,  then  the  approximation  g  defined  in  the  proof  of  Theorem  f.l 
can  be  computed  in  polynomial  time. 
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Proof.  To  compute  the  output  of  the  approximation  g(<f),  where  g  is  defined  as  in  the  proof 
of  Theorem  4.1,  we  begin  by  computing  the  quality  score  q(a,j )  for  each  possible  outcome 
j  G  [k].  Since  /  is  neutral,  the  correct  outcome  /(<?)  depends  only  on  the  vote  configuration — 
that  is  the  unordered  set  of  votes  that  were  cast — and  not  on  the  full  preference  profile  a  per 
se.  We  can  therefore  compute  the  quality  scores  of  all  outputs  j  G  [k]  simply  by  evaluating 
the  original  rule  /  on  each  of  the  possible  vote  configurations  and  setting  the  quality  score 
of  an  output  to  be  equal  to  the  (negative)  minimum  distance  between  the  configuration 
associated  with  a  and  a  configuration  that  returns  the  outcome  j.  There  are  k\  different 
ways  a  player  could  vote  and  each  voting  preference  is  cast  by  at  most  n  voters,  therefore 
there  are  0(nk')  vote  configurations  that  need  to  be  considered. 

Having  computed  all  of  the  quality  scores  q(a,  j),  we  can  define  a  distribution  Dg  such 
that  the  probability  that  Dg  returns  an  outcome  j  G  [k]  is  given  by  Dg(j )  =  max{l  + 
rfci  max{l  +  £(?(<?,  t),  0}-  Observe  that  this  distribution  is  efficiently  sam- 
plable,  therefore  the  approximation  g  can  be  computed  efficiently  computed.  □ 

5  Optimality  of  our  Approximations 

In  this  section,  we  develop  lower  bounds  on  the  approximation  parameters  that  can  be 
achieved  for  approximately  strategy-proof  voting  rules.  In  particular,  we  demonstrate  that 
only  trivial  voting  rules  can  be  e-strategy-proof  for  small  values  of  e,  and  we  show  that  such 
voting  rules  cannot  provide  good  approximations  of  natural  voting  rules  like  PLURALITY. 

We  begin  by  showing  that  for  small  values  of  e,  only  trivial  voting  rules  are  e-strategy- 
proof.  The  general  outline  of  the  proof  is  as  follows:  we  define  a  reduction  between  e- 
strategy-proof  voting  rules  and  0-strategy-proof  voting  rules  by  including  punishments  for 
players  who  misreport  their  preferences.  Consider  the  following  modified  mechanism:  with 
probability  1  —  p  we  run  the  original  mechanism  and  with  probability  p  we  choose  a  single 
player  i  and  output  his  first  choice  (according  to  his  reported  preferences).  This  has  the  effect 
that  for  appropriate  values  of  e,p ,  no  one  wants  to  misreport  their  first  choice.  However,  they 
can  still  successfully  deviate  by  making  more  subtle  changes  further  down  their  preference 
profile.  We  overcome  this  by  modifying  our  behavior  slightly:  when  we  choose  a  player  i, 
we  return  each  of  his  choices  with  probability  inversely  proportional  to  their  ranking  in  his 
reported  preferences.  For  small  values  of  e,  this  style  of  punishment  is  sufficient  to  offset 
any  benefits  yielded  by  a  deviating  strategy  under  the  original  mechanism.  The  result  then 
follows  from  Theorem  3.2.  More  formally: 

Theorem  5.1.  Let  e  <  1/nk3.  A  randomized  voting  rule  g  :  (Efc)n  — > ►  [k]  is  e-strategy-proof 
if  and  only  if  it  is  trivial. 

Proof.  Let  tq  be  uniformly  distributed  for  all  i  G  [n]  —  that  is  the  utility  assigned  to  the 
outcome  ranked  jth  is  (k  —  j)/{k  —  1).  Define  a  new  randomized  voting  rule  g ’  that  for 
each  i  G  [n] ,  returns  i’s  jth  choice  (according  to  i’s  reported  preference)  with  probability 
ke{k—j)  and  otherwise  follows  the  original  mechanism  g.  That  is,  we  use  one  of  the  unilateral 
“punishment”  mechanisms  with  probability  p  =  n  Ejeffe]  k£(k  ~  •))  <  n^£  and  we  use  the 
original  mechanism  with  probability  1  —  p.  Observe  that  both  of  these  probabilities  are  in 
the  range  [0,1]  because  £  <  1/nk3. 
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Let  a,  o'  be  preference  profiles  that  differ  only  in  the  ith  component  and  let  <7,^  denote 
the  outcome  ranked  jth  by  cr*.  We  begin  by  claiming  that  the  expected  loss  of  utility  from 
deviating  (due  to  the  unilateral  punishment  mechanisms)  is  at  least  e.  This  will  offset  any 
utility  gained  under  the  original  mechanism  g. 

Claim  5.2.  Eq  ke(k  -  j)(ui(o,  o itj)  -  Ui(o,  of))  >  e. 

We  first  show  how  to  prove  Theorem  5.1  assuming  this  claim,  and  then  we  prove  the  claim 
itself. 


E[ui(a:g\a))\  -  E[ui(o,  g'(o'))]  =  ke(k  ■-  j)(ui(a,  oid)  -  u^o.of)) 

j 

+  (1  -p){E[ui(a,g(a))\  -  E[ui(o,  g(o'))])  (1) 

>  £  +  (1  -p)(E[ui(o1g(o))}  -  E[ui{a,g{a'))])  (2) 

>e  +  (l-p)(-e)  (3) 

>0  (4) 


(1)  follows  by  the  definition  of  expectation,  (2)  follows  immediately  from  Claim  5.2,  (3) 
follows  from  the  fact  that  the  original  mechanism  g  is  e-strategy  proof,  and  (4)  follows  from 
the  fact  that  p  G  [0, 1].  Since  g'  is  0-strategy-proof,  by  Theorem  3.2  it  must  be  trivial.  Since 
g1  follows  mechanism  g  with  probability  1  —  p  >  0,  it  follows  that  g  is  also  trivial. 

Proof  of  Claim  5.2:  We  begin  by  considering  the  simplified  case  where  <7*  and  o\  are 
identical  except  that  the  positions  of  two  outcomes  7 1 ,  j2  are  swapped.  Assume  without  loss 
of  generality  that  Oi(ji)  >  o i(j2).  In  this  case,  most  of  the  k  unilateral  punishment  rules 
cancel  (because  the  preferences  only  differ  in  two  positions).  Let  ra(j)  indicate  the  rank  of  j 
according  to  preference  o.  The  expected  difference  in  utility  contributed  by  the  punishment 
mechanism  is 

(ke(k  -  rai(ji))ui(ji)  +  ke{k  -  rai(j2))ui{j2))  -  (ke(k  -  rCT/(ji))^(ji)  +  ke(k  -  rCT/(j2))^(j2)) 

Since  the  difference  between  a, ,  a't  is  that  the  two  ranks  are  switched — ra>  (j  1 )  =  rCTi(j2)  and 
?v(j2)  =  ra%  (j j ) — the  expected  difference  in  utility  can  be  written  as 

ke{{k-  ra.(J  1))  -  (k  -  rai(ji)))  M 1)  -  Ui(j2)) 

The  difference  in  rank  between  j\  and  j2  under  preference  a,  is  at  least  1.  Since  u*  is 
uniformly  distributed,  the  difference  in  utility  Ui  between  7 1 ,  j2  is  at  least  1/k,  therefore 
Ej  -  j)  (u(v,  <7iJ)  ~  v'ij))  >ke-  1  •  (1/k)  =  e. 

We  now  consider  the  general  case  where  at  and  a[  differ  arbitrarily.  We  dehne  a  sequence 
o'  =  o^\o^-2\ . . . ,  <7^2)  =  <7  iteratively  as  follows:  given  o^\  let  cr^t+1)  =  of*  for  all  £  ^  i. 
Define  the  preferences  of  iteratively  using  bubble  sort  [6]:  more  specifically,  let  r(t)  =  t 
mod  k.  If  t(l)  7^  1  and  o i(^~f_i  <  (Ji{(T^rf)  then  dehne  of  to  be  the  same  as  o[L  1') 

except  with  the  outcomes  ranked  r  —  1  and  r  hipped.  Else  let  of  =  o\u  The  fact 
that  this  sequence  is  well  dehned  (and  terminates  with  ol'm's  =  o)  follows  immediately  from 
the  correctness  of  bubble  sort.  If  two  adjacent  hybrid  preferences  are  identical,  the  voter’s 
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expected  utility  is  clearly  identical.  If  two  adjacent  hybrid  preferences  are  not  identical,  the 
difference  in  voter  i’s  expected  utility  between  two  adjacent  hybrid  preferences  is  at  least 
e:  this  follows  by  the  above  argument  (for  the  simple  case)  since  two  outcomes  are  flipped 
if  and  only  if  they  start  in  the  wrong  relative  order.  Claim  5.2  then  follows  by  the  triangle 
inequality.  □ 

In  spite  of  this  limitation,  some  trivial  voting  rules  still  have  good  approximation  for 
small  values  of  e. 

Example  5.3.  Define  a  class  of  voting  rules  Subset-5  :  (Efc)n  — >  [k]  by  Subset-5(<?)  = 
PLURALITY (ui, . . .  ,os).  The  rule  g  that  returns  an  output  j  G  [k]  uniformly  at  random  is  a 
O-strategy-proof  5-approximation  of  Subset-5. 

Example  5.4.  Define  a  class  of  voting  rules  MODULO-A;  :  (Efc)n  — >  [k]  that  returns  the 
number  of  first-choice  votes  given  to  the  winner  (under  the  voting  rule  PLURALITY)  modulo 
k.  Again  the  rule  g  that  returns  an  output  k  uniformly  at  random  is  a  O-strategy-proof 
1 _k  j  2j  -approximation. 

However,  neither  of  these  voting  rules  satisfy  our  intuition  concerning  what  constitutes 
a  “good”  voting  rule.  Subset-5  is  not  neutral — that  is  the  outcome  depends  on  the  order 
of  the  players — and  MODULO-A;  is  not  monotonic. 

We  focus  instead  on  a  common,  natural  voting  rule:  PLURALITY.  We  show  that  under  our 
definition  of  an  approximation,  no  trivial  voting  rule  is  a  good  approximation  of  PLURALITY. 
The  proof  closely  follows  that  of  Procaccia  [14] .  Observe  that  this  result  implies  that  for  the 
voting  rule  PLURALITY,  the  approximation  constructed  in  Theorem  4.1  is  asymptotically 
optimal. 

Theorem  5.5.  There  exists  (3  >  0  such  that  for  all  n,  Plurality  does  not  have  a  trivial 
(3n- approximation. 

Proof.  Fix  a  constant  value  c  >  0  (e.g.,  c  =  Vk).  Recall  that  by  definition,  a  trivial  function 
g  is  a  probability  distribution  over  unilateral  and  duple  deterministic  voting  rules. 

First  consider  the  case  where  g  selects  a  duple.  Define  q3  =  Pr[j  G  Range(g)|g  selects  a  duple] 
and  observe  that  J2je[k]  =  2  which  implies  that  there  exists  a  set  A'  C  [A;]  of  k/c  alterna¬ 
tives  such  that  'Yhjz.A'  dj  A  2/c  <  2/c. 

Now  consider  the  case  where  g  selects  a  unilateral  rule.  Observe  that  there  exists  a  set 
N'  C  [n]  of  n/c  players  such  that  a  unilateral  rule  that  considers  only  an  agent  i  G  N'  is 
selected  with  probability  at  most  1/c  (conditioned  on  g  selecting  a  unilateral  rule).  Construct 
a  partial  preference  profile  defined  for  players  i  G  [n]  \  N '  that  satisfies  the  property  that 
each  outcome  j  G  [A;]  \  A1  is  ranked  first  by  equally  many  agents  i  G  [n]  \  N'  (and  no  such 
agent  ranks  any  other  outcome  first).  Since  \A'\  >  k/c ,  there  exist  an  output  x*  G  A'  such 
that  for  all  preference  profiles  a  consistent  with  the  defined  preferences  cq,  the  probability 
that  g(a)  =  x*  (conditioned  on  g  selecting  a  unilateral  rule  that  considers  only  an  agent 
i  G  [n]  \  N')  is  at  most  c/k.  Complete  the  preference  profile  a  so  that  it  satisfies  the  property 
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that  for  all  i  E  N',  x*  is  ranked  first.  Observe  that 

Pr [g{a)  =  x*\g  selects  unilateral  rule]  =  Pr[^(a)  =  x*\g  selects  unilateral  rule  in  N '] 

■  Pr[g  selects  unilat.  rule  in  N'\g  selects  unilat.  rule] 
+  Pr[g(<?)  =  x*\g  selects  unilateral  rule  in  [n]  \  N '] 

■  Pr[g  selects  unilat.  rule  in  [n]  \  N'\g  selects  unilat.] 

<  1  •  1/c  +  c/k  ■  1 

<  1/c  +  c/k 

Since  x*  G  A',  by  combining  the  two  cases,  we  get  that  Pr[g(<?)  =  x*}  <  max{2/c,  1/c  + 
c/k}. 

Finally,  we  observe  that  the  number  of  first-choice  votes  given  to  x*  is  at  least  n/c.  and  the 
number  of  first-choice  votes  given  to  any  output  j  ^  x*  is  at  most  (n  —  n/c)/(k  —  k/c)  =  n/k. 

We  interpret  this  as  saying  that  simultaneously,  all  outcomes  j  ^  x*  are  bad  (at  least 
( n/c  —  n/k)/ 2  corrupted  votes  are  required  to  effect  the  output  of  /)  and  the  probability 
that  g  returns  the  one  good  output  x*  is  low.  This  means  that  /  does  not  have  a  trivial 
{n/c  —  n/k)/ 2  —  1-approximation.  □ 

6  Relaxed  Approximations 

In  this  section,  we  consider  a  relaxed  notion  of  approximation,  called  a  (5,  g)- approximation, 
under  which  we  require  only  that  the  approximation  g  return  an  outcome  that  is  close  to  the 
correct  outcome  with  high  probability.  We  explore  how  this  relaxed  definition  can  be  lever¬ 
aged  to  establish  a  trade-off  between  the  proximity  of  “good  answers”  to  the  true  outcome 
and  the  probability  of  returning  a  good  answer.  In  particular,  we  demonstrate  two  dis¬ 
tinct  constructions  of  such  relaxed  approximations:  the  first  construction  extends  the  linear 
approach  employed  in  Theorem  4.1,  the  second  construction  uses  an  exponential  approach 
inspired  by  differential  privacy  and  provides  improved  guarantees  for  certain  values  of  5.  We 
also  develop  lower  bounds  that  shown  the  asymptotic  optimality  of  our  constructions. 

6.1  Defining  (5,  fi)- Approximations 

We  begin  by  formalizing  this  weaker  notion  of  approximation. 

Definition  6.1  ((<5,  /^-approximation).  A  (randomized)  voting  rule  g  is  a  (5,  //)- approximation 
of  a  voting  rule  /  if  for  all  inputs  <r, 

Pr K((<J,  g(a)),  (<j,  /(<?)))  >  5\  <  p. 

Observe  that  a  (5,  (^-approximation  is  equivalent  to  a  ^-approximation  as  defined  in 
Section  2. 
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6.2  Constructing  Relaxed  Approximations 

By  relaxing  our  definition,  we  inherently  facilitate  the  construction  of  randomized  e-strategy- 
proof  approximations  for  any  deterministic  function.  In  this  section,  we  show  two  such  con¬ 
structions.  In  Theorem  6.2  we  extend  the  linear  construction  from  Theorem  4.1  to  quantify 
the  /i- values  received  for  smaller  values  of  5.  In  Theorem  6.3  we  provide  an  alternative 
exponential  construction  that  provides  improved  guarantees  for  small  values  of  8. 

Theorem  6.2.  For  any  deterministic  voting  rule  f  :  (Efc)n  — ►  [k]  and  any  e  >  0,5  >  0,  / 
has  a  e-strategy-proof  (5,  p)- approximation  g,  where  p  =  0  if  e(8  +  1  )/k(k  +  1  +  e)  >  1  and 
p  =  (k  —  1)(1  —  (8  +  l)e  /  k(k  +  1  +  e))  /  (1  +  (k  —  1)(1  —  (8  +  l)e  /  k(k  +  1  +  e)))  else. 

Proof.  The  construction  is  identical  to  that  employed  in  the  proof  of  Theorem  4.1:  we  assign 
each  input-output  pair  (<r,j)  a  quality  score  q(a,j )  =  —dv((a,f(a)),  ( a,j )).  As  before,  let 
£  =  e/k[k  +  1  +  s) — this  value  is  chosen  to  guarantee  £-strategy-proofness.  The  mechanism 
g  returns  the  value  j  with  probability  proportional  to  max{l  +  £?(d,/),  0}. 

The  proof  that  the  resulting  mechanism  is  £-strategy-proof  is  identical  to  that  employed 
in  the  proof  of  Theorem  4.1.  It  is  only  necessary  to  demonstrate  the  quality  of  approximation 
achieved,  using  the  relaxed  notion  of  (5,  /^-approximations. 

As  before,  let  M(<f,  t)  —  \{j  G  [k]  :  q(a,j)  =  t}|,  that  is  M(a,  i)  is  the  number  of  outputs 
with  quality  score  q(a,j )  =  i.  We  again  observe  that  for  all  profiles  d, 


Pr K((d,/(d)),(d,#(d)))  >  5} 


H=— <5— i  max{l  +  £d  0 }M(d,  l) 

E;=o  max{l  +  £t,  0 }M (a,  t) 


We  now  wish  to  bound  this  probability  for  smaller  values  of  <5,  so  we  express  the  de¬ 
nominator  as  the  sum  of  two  terms  Y1~l=-5- i  max{l  +  £?(<?,  t),  0 }M(a,  t)  +  X^cT1  max{l  + 
£q(<r,  i),  0}M(a,  i)  which  is  minimized  (thereby  maximizing  the  total  fraction)  when  the 
second  term  (the  “good”  outputs)  consists  only  of  the  one  correct  answer. 


Pr [dv((a,  /(a)),  (d,  g(a)))  >  S]  < 


Et=_g_ i  max{l  +  0}M(d,  l) 

YJ!=s- i  max{l  +  £t,  0 }M (d,  t)  +  1 


Finally,  it  is  clear  that  the  right  hand  side  of  the  inequality  is  maximized  when  the  numerator 
is  maximized,  and  this  occurs  when  there  are  k  —  1  outputs  with  quality  q(<f,j )  =  —  S  —  1. 
Therefore 


Vd,  Pr[d„((d,  /(d)),  (d,  </(d)))  >  5]  < 


(k  —  1)  max{l  +  £(— 5  —  1),  0} 

1  +  (k  —  1)  max{l  +  £(— S  —  1),  0} 


The  result  follows. 


□ 


Observe  that  Theorem  6.2  is  a  simple  extension  of  Theorem  4.1  that  quantifies  the  guar¬ 
antees  achieved  for  smaller  values  of  5,  that  is  for  6  <  k(k  +  1  +£)/£  —  1.  However,  for 
such  small  values,  this  linear  construction  is  not  necessarily  optimal.  We  instead  present  an 
alternative  method  for  constructing  (8,  /^-approximations  in  which  p  >  0  but  which  offers 
improved  guarantees  for  small  values  of  8. 
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Theorem  6.3.  For  any  deterministic  voting  rule  f  :  (Xfc)n  — > ►  [k]  and  any  e  >  0,  5  >  0,  f 
has  a  e-strategy-proof  (5,  n)- approximation  g,  where  fi  =  (k  —  l)/((e  +  1)(5+1)/2  +  k  1). 

Proof.  We  employ  the  exponential  mechanism  of  Talwar  and  McSherry  [12]  to  construct  an 
approximation  g  of  the  voting  rule  /  as  follows:  we  assign  each  input-output  pair  ( a,j ) 
a  quality  score  q(F,j)  —  n  —  dv((a, /(<?)),  (<r,j)).  Observe  that  q(a,j )  decreases  linearly 
with  the  (minimal)  number  of  votes  that  must  be  corrupted  before  /  returns  j  instead  of 
/(<?).  Let  £  =  (l/2)ln(e  +  1) — this  value  is  chosen  to  guarantee  e-strategy-proofness  as 
discussed  in  Lemma  ??.  The  mechanism  g  returns  the  value  j  with  probability  proportional 
to  exp (£q(a,j)). 

First,  we  claim  that  the  resulting  mechanism  is  e-strategy-proof.  From  [12]  we  know  that 
this  mechanism  gives  2£-differential  privacy.  We  reproduce  the  proof  for  the  sake  of  complete¬ 
ness:  The  probability  that  an  output  j  is  chosen  is  given  by  (exp(£g(<r,  j ))/ (E,,e[fcl  exP(£,?(<T  0)) 
A  single  change  in  the  input  profile  a  can,  by  definition,  change  the  quality  score  by  at  most 
1,  giving  a  factor  of  at  most  exp(£)  in  the  numerator  and  at  least  exp(— £)  in  the  dominator, 
yielding  a  total  change  in  probability  of  at  most  exp (2£).  It  follows  by  Lemma  ??  that  the 
approximation  g  is  e-strategy-proof. 

Second,  we  claim  that  g  is  a  good  approximation  for  /  according  to  the  distance  metric 
dv.  We  note  that  Talwar  and  McSherry  present  a  general  accuracy  bound  for  the  expo¬ 
nential  mechanism  [12],  however,  that  bound  is  too  loose  for  our  purposes.1  Instead,  we 
take  advantage  of  the  particular  distance  pseudometric  dv  to  develop  a  tighter  bound.  Let 
=  |{j  G  [k]  :  q(cr,j)  =  t}|,  that  is  is  the  number  of  outputs  with  quality 

score  q(a,j )  =  l.  We  observe  that  for  all  profiles  cr, 


Pr [dv((a,f(a)),(a,g(a)))  >  6} 


EJ:4((ffW)),P,#)))>i  exp(^(q,  g(a))) 
Eje[fc]  exp (£<?(<?,  3 (a))) 
exp (&)M (a,  l) 

E'Lo  exp (£i)M(a,i) 


That  is,  the  probability  that  g  returns  an  output  greater  than  5  from  the  true  output  is  equal 
to  sum  over  such  outputs  j  of  the  probability  that  j  is  chosen  divided  by  the  equivalent  sum 
over  all  outputs.  Exploiting  our  metric  dv ,  this  is  then  re-indexed  over  the  set  of  possible 
quality  scores. 

We  express  the  denominator  as  the  sum  of  two  terms  EEo^1  exp(£t)M (<?,  0+Ef=,t-5  exp (£t)M(er,  t) 
which  is  minimized  (thereby  maximizing  the  total  fraction)  when  the  second  term  (the 
“good”  outputs)  consists  only  of  the  one  correct  answer. 


Pr [dv((a,f(d)),(a,g(a)))  >  6}  < 


YZJ_  Xexp (^)M(g,t) 
EEo5”1  exp t)  +  exp(^n) 


Finally,  it  is  clear  that  the  right  hand  side  of  the  inequality  is  maximized  when  the  numerator 
is  maximized,  and  this  occurs  when  there  are  k  —  1  outputs  with  quality  q(a,  j)  —  n  —  5  —  1. 

1In  particular,  for  small  values  of  5  (e.g.,  S  <  178  when  e  =  .05  and  k  =  3)  the  original  bound  makes  the 
trivial  statement  that  Pr[du((<T, /(<?)),  (<r,  <?(<?)))  >  5]  <  1. 
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Therefore 


V<?,  Pr[<i„(((j ,  /(<?)),  (a,  c/(a)))  >  5]  < 


(fc~  1)  exp(^(n  —  <5  —  1)) 
exp(£n)  +  {k  —  1)  exp(£(n  —  5  —  1)) 

(*-l) 


(e  +  1)(5+1)/2  +  (fc  -  1) 


□ 


As  before,  we  can  express  the  quality  of  the  exponential-approximations  in  terms  of  their 
asymptotic  behavior. 


Corollary  6.4.  Let  e  =  u(l/n),  f3,  p  >  0,  and  let  f  :  (£*,)"  — > ►  [k\  be  a  deterministic  voting 
rule.  For  sufficiently  large  n,  there  exists  an  e -strategy-proof  randomized  voting  rule  g  that 
is  a  (/3n,  ff) -approximation  of  f . 


Proof.  Fix  f3  >  0  and  let  5  =  (3n.  Let  g  be  defined  as  in  the  proof  of  Theorem  4.1  and 
recall  that  (as  shown  in  the  previous  proof)  g  is  an  e-strategy-proof  (/ 3n ,  ^+1)(/3l+7)/2+(fc_1) )~ 
approximation  of  /.  Observe  that 


lim 

n— xx) 


(fc-i) 

(e  +  l)On+1)/2  +  (k  —  1) 


lim  _ — _ — _ 

n— >0°  ((e  +  1  )l/£)d/3n+1)/2  +  (k  _ 

0 


(1) 

(2) 


The  first  step  is  simple  arithmetic.  (2)  follows  by  the  following  argument,  which  demonstrates 
that  the  denominator  goes  to  infinity  as  n  grows:  If  e  =  0(1)  then  by  definition  e  +  1  is 
bounded  below  by  some  constant,  so  it  suffices  that  (/ 3n  +  l)/2  goes  to  infinity,  which  is 
obvious.  In  the  case  where  e  =  o(  1),  observe  that  since  £  =  u(l /n),  lirn^oo  e(/3n- )-l)/2  =  oo. 
It  therefore  suffices  to  show  that  (e+1)1^  is  bounded  below  by  some  constant.  Since  £  =  o(  1), 
limn_>0O(£  +  l)1/e  =  lim£_0(£  +  l)1/e  =  e. 

It  follows  that  for  any  /3,  /i,  for  sufficiently  large  n  there  exists  an  e-strategy-proof  (/3n,  p)- 
approximation.  □ 

Example  6.5.  For  concreteness,  consider  the  case  where  you  have  one  hundred  players  and 
three  outputs.  Set  e  =  .005.  The  probability  that  g  returns  an  incorrect  answer  is  at  most  .67 
(that  is,  any  voting  scheme  /  :  (E3)100  — >  [3]  has  a  .05-strategy-proof  (0,  .67)-approximation). 

Alternatively,  consider  an  election  with  100  million  voters  and  three  outputs  (about 
the  scale  of  a  United  States  presidential  election).  Again  fixing  £  =  .005,  the  probability 
that  g  returns  an  answer  further  than  5000  votes  from  the  correct  answer  (in  practice, 
well  within  the  vote  corruption  in  such  an  election)  is  at  most  .00001  (i.e.,  any  voting  rule 
/  :  (Eg)100,000,000  — >  [3]  has  a  .005-strategy-proof  (5000,  .00001)-approximation).  Looked  at 
in  another  way,  this  says  that  in  any  election  with  100  million  voters  and  three  outputs 
in  which  one  outcome  wins  by  at  least  5000  votes  (e.g.,  a  typical  national  election),  this 
mechanism  will  return  the  correct  answer  with  probability  at  least  .99999. 

The  relative  guarantees  achieved  by  these  two  constructions  are  shown  in  the  following 
table;  numbers  are  calculated  with  s  =  .001,  n  =  100,  000,  000,  and  k  =  3. 


16 


6.3  Extended  Lower  Bounds 

In  this  section,  we  justify  our  original  definition  of  approximation  by  showing  two  lower 
bounds  that  strictly  limit  the  utility  of  alternative  definitions;  First,  we  extend  the  lower 
bound  from  Theorem  5.5  to  show  that  our  relaxed  definition  does  not  admit  asymptotically 
better  approximations.  In  particular,  when  e  =  o(l/n),  we  show  that  PLURALITY  cannot 
be  well-approximated  even  for  /i  >  0.  We  then  consider  an  alternative  definition  that  has 
been  considered  previously  in  the  context  of  O-strategy-proofness:  the  requirement  that  the 
approximation  g  be  equal  to  the  original  function  with  high  probability  (in  our  notation, 
approximations  with  5  =  0).  We  extend  the  work  of  Gibbard  and  Satterthwaite  to  show 
that  only  dictatorial  voting  rules  have  £-strategy-proof  approximations  with  5  =  0. 

We  first  bound  the  asymptotic  behavior  of  the  relaxed  approximations  introduced  in 
Appendix  6. 

Theorem  6.6.  Let  n  >  k,  let  (3  >  0.  For  sufficiently  large  n,  Plurality  does  not  have  a 
trivial  (, 8n ,  1  —  2/ Vk)- approximation. 

Proof.  This  extended  result  follows  immediately  from  the  proof  of  Theorem  5.5  by  setting 
c  =  \fk.  □ 

We  now  consider  the  case  where  5  =  0  and  show  that  only  dictatorial  functions  can  be 
approximated  in  this  manner.  The  key  insight  is  to  develop  quantitative  analogs  of  mono¬ 
tonicity  and  Pareto  optimality  and  to  show  that  any  £-strategy-proof  voting  rule  g  satisfies 
their  guarantees.  First  employed  introduced  by  Barbera  and  Peleg  [1],  these  properties  can 
be  summarized  as  follows:  monotonicity  is  the  property  that  if  a  given  preference  profile  B 
returns  an  outcome  j  then  any  preference  profile  a'  with  the  property  that  all  players  i  rank 
j  at  least  as  highly  under  a'  as  under  a  will  also  return  the  outcome  j.  Pareto  optimality  is 
the  property  that  if  all  players  rank  outcome  j  above  outcome  j'  then  the  voting  rule  will  not 
return  outcome  j'.  In  their  quantitative  generalizations,  the  strict  guarantees  are  relaxed  to 
upper  and  lower  bounds  on  the  probability  that  a  rule  g  returns  the  outcome  j. 

Lemma  6.7  (Monotonicity).  Let  g  be  a  e-strategy-proof  (0,1  —  p)- approximation  of  the 
deterministic  voting  rule  f.  If  g(u)  =  a  with  probability  at  least  p  on  some  strategy  profile 
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o  G  (Sfc)n  then  for  all  strategy  profiles  o'  G  (Efc)n  such  that  \/x  G  [k]  ,i  G  [n],  cr'(a)  >  cr'(x)  if 

ofia)  >  ofix),  g(o')  =  a  with  probability  at  least  p. 

Proof.  For  all  players  i  fix  the  tq  to  be  uniformly  distributed  between  0  and  1.  That  is  the 
utility  a  player  i  receives  if  the  outcome  they  ranked  jth  wins  is  fik  —  j)/ fik  —  1)  (recall  we  can 
do  this  since  the  definition  of  strategy- proofness  quantifies  over  all  possible  utility  functions). 
Set  p  =  (1  +  e)(k  —  l)/k  and  observe  that  the  following  two  properties  hold  for  all  k  >  3: 

(PI)  If  ofia )  >  ofib)  then  p  ■  ufia)  >  p  ■  ufib)  +  (1  —  p)ufix)  +  e  for  all  outputs  x  G  [k] 

(P2)  p  >  1/2 

Consider  a  sequence  of  preference  profiles  Vi, . . .  ,ve  G  (F/c)n  (£  <  n)  with  the  property 
that  Vi  =  o,  Vk  =  o' ,  for  all  j  G  {1, . . . ,  I  — 1 }  Vj  differs  from  v]+\  in  exactly  one  place,  and  for 
all  j,  vJ+i:i(a)  >  Vj+i}i(x )  if  Vjfia)  >  Vjfix).  Assume  for  contradiction  that  Pr [gfiofi  =  a]  <  p. 
This  implies  that  there  exist  Vj,Vj+ 1  such  that  Pr[g(vj )  —  a]  >  p  and  Pr[g(u)+1)  =  a]  <  p. 
Since  g  is  equal  to  /  with  probability  p  >  1/2  on  all  inputs,  it  follows  that  Pr[g(u)+i)  =  b]  >  p 
for  some  outcome  b  a.  Let  i  be  the  voter  whose  preferences  change  between  Vj,Vj+ 1- 
Since  g  is  e-strategy  proof  and  the  parameters  satisfy  (PI),  v3fib)  <  Vjfia)  and  hence  by 
assumption  v3+i fib)  <  Vj+ifia).  On  the  other  hand,  e-strategy-proofness  combined  with 
(PI)  also  implies  that  Vj+ifib)  >  Vj+ifia),  yielding  a  contradiction.  □ 

Lemma  6.8  (Pareto  Optimality).  Let  g  be  a  e-strategy-proof  (0, 1  —  p) -approximation  of  the 
deterministic  voting  rule  f.  If  ofia)  >  ofib )  for  all  i  G  [n]  then  Pr[g(c?)  =6]  <  1  —  p. 

Proof.  As  in  the  proof  of  Lemma  6.7,  fix  the  utility  functions  tp  to  be  uniformly  distributed 
between  0  and  1  and  observe  that  they  satisfy  properties  (PI)  and  (P2)  for  p  =  (1  +  e)(k  — 
1  )/k.  Assume  for  contradiction  that  Pr [g(o)  =  b]  >  1  —p.  Since  g  is  a  (0, 1— p)- approximation 
of  /  (that  is  Pr [g(o)  =  f(o)}  >  p),  this  implies  that  Pr [g(o)  —  b\  >  p.  Let  o'  G  (Efc)n  be 
a  preference  profile  such  that  Pr[g(a)  =  a]  >  p  (such  exists  since  /  is  onto).  Define  a  third 
preference  profile  o"  satisfying 

of  (a)  >  of  fib)  >  of(x)\/x  a,b,\/i  G  N 

By  monotonicity,  Pr [g(o")  =  a]  >  Pr[p(a/)  =  a]  >  p.  On  the  other  hand,  since  ofia)  > 

ofib) Vi  G  N,  monotonicity  also  implies  that  Pr [g(o")  =  b]  >  Pr[p(cr)  —  b]  >  p.  Since  p  >  1/2 

(P2),  this  yields  a  contradiction.  □ 

Using  these  two  lemmas,  the  lower  bound  follows  by  a  proof  analogous  to  that  introduced 
by  Svensson  [16]  for  the  exact  case. 

Lemma  6.9  (n=2).  Let  f  :  (E*,)2  — ■»  [k]  be  a  deterministic,  onto  voting  rule  with  k  >  3  and 
let  g  be  a  (0, 1  —  p) -approximation  of  f .  If  g  is  e -strategy-proof  then  f  has  a  dictator. 

Proof.  Initialize  A  =  [k],Ai  =  A2  =  0.  While  |A|  >  1,  let  ao,cq  E  A  (a0  cq),  and  define 
a  preference  profile  u  =  («o,«i)  such  that  ufiafi  >  ufiai-fi  >  ufix).  By  Pareto  optimality, 
Pr [g(u)  =  x]  <  1  —  p  for  all  x  a0,Oi.  Since  g  approximates  /,  it  follows  that  3 i  G  {0, 1} 
such  that  Pr[g(n)  =  a.f\  >  p.  Now  define  an  alternative  preference  for  the  other  player  rq.j 
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such  that  Vi-i(ai-i)  >  V\ -i(x)  >  v\ _;(aj).  By  Pareto  optimality,  there  still  exists  j  G  {0, 1} 
such  that  Pr[(yf(u.j,  Ui_j)  =  af\  >  p.  By  strategy-proofness,  j  =  i.  Monotonicity  therefore 
implies  that  for  all  w  such  that  wfai )  >  Wi(x),  Pr[p(w)  =  a*]  >  p.  Add  a*  to  A;  and  remove 
it  from  A. 

After  this  process  is  complete,  each  set  Ai  contains  outcomes  for  which  player  i  is  a 
p-dictator,  this  outcomes  that  satisfy  the  property  that  if  player  i  ranks  that  outcome  first, 
then  g  returns  that  outcome  with  probability  at  least  p.  Since  p  >  1/2,  it  is  clear  that  one 
of  the  sets  A0,  A\  must  be  empty.  Let  Ai  be  the  nonempty  set. 

We  now  claim  that  player  i  is  a  dictator  for  /.  In  order  to  show  this,  it  is  sufficient  that  for 
all  c  G  A'\Ai,  i  is  a  p-dictator  for  c.  Repeat  the  above  argument  setting  Ui(c)  >  Ui(a,i )  >  Ui(x) 
and  Mi_j(aj)  >  Mi_j(c)  >  wi_j(x).  As  before,  either  i  is  a  p-dictator  for  c  or  1  —  i  is  a  p- 
dictator  for  a.  The  later  is  impossible  since  we  already  showed  that  a*  is  p-dominated  by  i. 
Since  g  is  equal  to  /  with  probability  at  least  p,  the  lemma  follows.  □ 

Theorem  6.10.  If  a  deterministic,  onto  voting  rule  f  with  k  >  3  outputs  has  a  e-strategy- 
proof  (0, 1  —  (1  +  e)(k  —  1) / k) -approximation,  then  it  has  a  dictator. 

Proof.  Let  p  =  (l+e)(k—l)/k  and  let  g  be  a  e-strategy-proof  (0, 1  —  p)-approximation  of  the 
function  /  (the  existence  of  such  a  function  is  guaranteed  by  the  definition  of  approximate 
strategy-proofness).  We  proceed  by  induction,  using  the  Lemma  6.9  as  a  base  case.  Define  a 
function  h\{u\,v)  =  g{ui,v,v, ... ,  v).  Since  /  is  onto,  for  all  outputs  x  there  exists  an  input 
profile  u  such  that  Pr [g{u]  —  x\  >  p,  so  it  follows  that  there  exists  a  preference  ordering  v 
that  ranks  x  first  such  that  Pr[/r1(u1,u)  =  x]  >  p  (by  monotonicity).  Moreover,  since  g  is 
e-strategy-proof  and  a  p  approximation  of  a  deterministic  function  hi  is  also  e-strategy-proof 
and  a  p-approximation  of  a  deterministic  function.  It  follows  by  the  previous  lemma  that  hi 
has  a  p-dictator. 

If  the  p-dictator  is  player  1:  By  monotonicity,  1  is  also  a  p-dictator  for  r/;  since  g  is  a 
(0, 1  —  p)-approximation  of  /  it  follows  that  p  is  also  a  dictator  for  /. 

If  the  p-dictator  is  player  2:  Let  u\  be  an  arbitrary  fixed  preference  ordering  for  player 
1  and  define  a  probabilistic  voting  rule  ^2(^2,  •  •  •  ,un)  =  g{u\,U2,  ■  ■  ■  ,un).  h-2  is  also  p-onto 
and  e-strategy-proof  (this  follows  by  the  same  argument  as  made  for  hi).  It  follows  by  our 
induction  hypothesis  that  h2  has  a  p-dictator.  Assume  without  loss  of  generality  that  2  is  a 
p-dictator  for  h.  Define  a  final  voting  rule  q(ui,  u2)  =  g(ui,  u2,  vf,  ■  ■  n  u*n),  where  u^, ... ,  u*n 
are  again  fixed  preference  profiles.  As  before,  onto  and  strategy-proofness  follow  from  g. 
Player  1  cannot  be  a  dictator  for  q  since  player  2  dictates  when  u \  =  u\,  so  it  follows  that 
player  2  is  a  p-dictator  for  q.  Since  the  fixed  preferences  were  arbitrary,  by  monotonicity,  2 
is  a  p-dictator  for  g  and  hence  a  dictator  for  /.  □ 

Example  6.11.  Numerically,  any  voting  rule  with  three  outputs  that  has  a  .05-strategy- 
proof  (0,  ,3)-approximation  has  a  dictator.  By  comparison,  recall  that  Corollary  4.1  showed 
that  every  voting  rule  with  three  outputs  has  a  .05-strategy-proof  (0,  .67)-approximation. 
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